WatchGuard known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 4 WatchGuard vulnerabilities: 2 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 1 with known ransomware use. The most recent was added Dec 19, 2025.
RSS feed for WatchGuard exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-12-19 | CVE-2025-14733 | WatchGuard Firebox Out of Bounds Write Vulnerability | 9.3 (v4.0) | 29.4% | 2025-12-26 | Known |
| 2025-11-12 | CVE-2025-9242 | WatchGuard Firebox Out-of-Bounds Write Vulnerability | 9.3 (v4.0) | 92.2% | 2025-12-03 | Unknown |
| 2022-04-11 | CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 8.8 (v3.1) | 10.8% | 2022-05-02 | Unknown |
| 2022-03-25 | CVE-2022-26318 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 9.8 (v3.1) | 78.2% | 2022-04-15 | Unknown |